Merlin-Arthur
The class of decision problems verifiable by a Merlin-Arthur protocol: Merlin (an unbounded prover) sends a proof string to Arthur (a BPP verifier), and Arthur decides whether to accept. We require:
- If the answer is “yes,” there exists a proof Merlin can send such that Arthur accepts with probability at least 2/3.
- If the answer is “no,” then for all proofs Merlin might send, Arthur rejects with probability at least 2/3.
MA is the “one-message” analogue of IP, where the prover speaks before Arthur’s random coins are chosen. This contrasts with AM, where Arthur sends a random challenge first and then Merlin responds.
See the complexity zoo entry here.
Known relationships
- : any NP proof works as Merlin’s message (Arthur just checks it deterministically), and any MA protocol can be converted to an AM protocol by having Arthur send random coins first (Merlin’s optimal strategy is independent of those coins for a constant-round protocol).
- — TODO citation.
- , placing MA in the second level of the polynomial-time hierarchy.
- It is not known whether MA = NP or whether MA = AM. Showing MA ≠ NP would require circuit lower bounds beyond what is currently known.